Privacy policy
How Tiệm Trà Nhỏ handles saves, accounts, analytics and advertising.
Updated: 03/10/2026Game invitations
A shared poster or link contains a random referral code to measure poster creation, copying, share-sheet handoff, QR/link visits, starting play, finishing a trading day and friend requests. Cloudflare Analytics Engine stores these events for up to 90 days; only administrators can view the reports. No shop names, email addresses, account IDs, invitation credentials or saved games are sent to this dataset. Temporary session storage attributes events for up to 24 hours and limits repeats. A share-sheet handoff does not prove a social post or a new player.
Invitation rewards
If you create or accept a reward invitation, we store a random shop identifier, hashes of a private reward key and a browser identifier, the invitation source and timestamps, and cumulative in-game rewards on Cloudflare D1. This compact ledger prevents duplicate claims and keeps earned rewards until the shop reconnects. It contains no full game saves, email addresses or Google identifiers. A temporary hash of network information limits abuse. The private key and applied reward total stay in your local save and are included in a backup you choose to make; keep backups private. Clearing site data without a backup can lose access to local rewards. Each new browser identity can receive one welcome reward; this is not cross-device identity verification. Rewards are game currency with no cash value, credited to local or Smooth Play shops.
Error diagnostics
To diagnose technical problems, we send limited error categories, our script filenames and line positions, app build, page category, language, browser/device category and API error codes to Cloudflare Analytics Engine. Reports do not include raw error messages, save contents, shop names, account IDs, emails, cookies or URL parameters. Temporary session storage limits repeated reports. Diagnostic events are retained for up to 90 days and only administrators can view them. Network information is processed to deliver requests and temporarily limit abuse; it is not written to the diagnostic dataset.
Recommendations and campaign measurement
We recommend our products and partner sites. Browser storage limits repeated recommendations and remembers pauses after closing or clicking. Cloudflare Analytics Engine records campaign and event type; impressions and clicks also go to our existing analytics services. Effective impressions require at least half the placement to be visible for one continuous second. Links carry referral and UTM parameters. Destination websites handle subsequent activity under their own policies; clicks are not registrations or purchases.
Local, Smooth Play and Ranked play
Local play does not require an account. Its progress, settings, daily snapshots and invitation reminders are stored in your browser. Clearing site data can erase them. A local save is uploaded only when you choose Smooth Play cloud backup. Smooth Play play keeps a separate device copy and uploads changed progress after daily settlement, important milestones and periodic checks. Ranked play keeps separate server-run progress. Backups include a shop ID, version, request ID and a per-session writer identifier to prevent conflicting device writes. We retain the latest Smooth Play backup and three prior versions. Existing cloud shops choosing Smooth Play also keep an inaccessible migration recovery snapshot; it is not overwritten by Smooth Play play.
Google sign-in
If you choose online play, Google authenticates you. We store your Google account identifier, first name, verified email address and latest Google sign-in time for account identification and support. Your email is private and is not included in public shop pages, rankings or analytics. Existing accounts receive an email address when they next sign in and grant the email permission. Signing in does not subscribe you to promotional emails. We do not receive your Google password or request access to Gmail, Drive or contacts. A necessary, secure session cookie keeps you signed in for up to 30 days; signing out revokes that session.
Player ratings
After playing, you may rate the game from one to five stars without signing in. We store your score and a hash of a random identifier saved in this browser so you can change your rating. We show only the combined score and number of ratings. A temporary hash of network information limits repeated submissions. Clearing site data removes your ability to change that browser’s previous rating. Player ratings are separate from simulated customer reviews inside the game.
Online shop data
We store your online shop progress, game actions, shop name, preferences, invitations, friend relationships and weekly scores on Cloudflare. We keep recent operation receipts to prevent duplicate transactions and recent daily snapshots to help recover errors. Online progress is separate from your local shop.
Visits and rankings
Online shops start private and rankings start disabled. You can allow friends or any signed-in player to visit. Visitors see your shop name, menu, tagline, upgrades, day and rating. They do not receive your cash, inventory, full save or Google identifier. Opting into rankings displays your shop name and score; you can turn this off in Shops & friends → Privacy. Worldwide ranking display changes can take up to three minutes. Visit permissions are checked when you visit. New invitation links show the inviting shop name and stay valid until the owner replaces the link or disables invitations.
Analytics and service providers
The website uses Google Analytics 4 and Pageview (app.pageview.app) for page visits and selected game events, such as starting a day or switching game modes. These services process browser and request information according to their policies; Google Analytics may use cookies. Our custom game events do not contain shop names, Google identifiers, emails or save files. Cloudflare hosts the site and database and processes requests for delivery and security. Hashed network identifiers may be used temporarily to limit abusive sign-in requests.
Advertising and Google cookies
We have integrated Google AdSense code. Where ads are served, Google and third-party vendors may place or read cookies, use web beacons and process IP addresses, device/browser information and other identifiers to deliver and measure ads, limit repeated ads and prevent fraud. Google advertising cookies allow Google and its partners to show ads based on prior visits to this site and/or other websites. The presence of the code does not mean ads are available on every page.
Advertising choices
You can manage or opt out of personalized Google advertising in Google My Ad Center. You can also visit YourAdChoices for participating third-party vendors. These choices do not necessarily remove all ads and may depend on your browser, device or signed-in account. Read how Google uses information from partner sites and Google advertising technologies. Browser settings let you block or delete cookies; this can sign you out or affect features. Where consent is required, advertising must follow the applicable consent choices; this policy itself is not a request for consent.
Ranked shop archives
After a ranked owner chooses to open a fresh second shop in Smooth Play, the retained ranked shop is archived after 14 days without ranked gameplay. The ranked archive, including its recovery copies, is permanently deleted after 90 days from archiving and can no longer be restored in the game. Restoring before the deadline cancels that deletion countdown and starts a new 14-day inactivity period. Signing in, visiting shops, cosmetic changes and Smooth Play do not extend ranked activity. This rule does not delete the Smooth Play shop, Local shop, account, friends or privacy settings.
Retention and requests
We retain online account and shop data to provide your saved game while the account remains in use. Contact us to request access, correction or deletion. We verify requests and explain any information that must be retained for security or legal reasons. Technical logs, recovery copies and service-provider records can have different retention periods; we do not promise immediate removal from all backups.
Children and personal information
The game does not need a real name in a shop name or slogan. Do not publish personal contact details there. If a parent or guardian believes a child provided personal information that should be removed, contact us. Use of any child-directed advertising must follow the applicable restrictions; we do not ask players for sensitive information to personalize ads.
Your choices and contact
You can play locally without Google sign-in, sign out, change visit permissions and hide your ranking. Clearing browser data removes local progress but does not delete your online account. For questions or a request to remove online account data, contact [email protected]. We will need to verify that the account belongs to you.